CVE Feed

    Dashboard / CVE / CVE-2024-57234

    CVE-2024-57234

    NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.

    Published:May 5, 2025
    Last Modified:May 7, 2025
    EPS:May 5, 2025
    EPSS Score:0.014
    CVSS Score:6.5

    Affected Products

    Vendor
    Netgear
    Product
    Rax50
    Vendor
    Netgear
    Product
    Rax50 Firmware

    Exploits

    https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_5_apcli_cancel_wps/README.md

    Related CVEs

    CVE-2026-11736 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin use…
    CVE-2026-11735 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin …
    CVE-2026-11738 (CVSS 4.3) — Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators c…
    CVE-2026-11739 (CVSS 4.9) — A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att…
    CVE-2026-11734 (CVSS 1.1) — A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the a…
    CVE-2026-11733 (CVSS 1.1) — A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily inte…
    CVE-2026-11737 (CVSS 4.3) — Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators …
    CVE-2026-11814 (CVSS 4.9) — A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the abi…
    CVE-2026-62658 (CVSS 4.7) — A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone alread…
    CVE-2026-0418 (CVSS 4.3) — Insufficient configuration management in the listed devices allows authenticated administrators connected to t…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High